e89cbbd0dd9bed80ad5fb56cfdf867529351416d378e1220b65bd1d58466c55a

Analysis

max time kernel
146s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10/03/2024, 05:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bdbdc62ebfa1b11178d735f49926bf7e.html
Size

15KB
MD5

bdbdc62ebfa1b11178d735f49926bf7e
SHA1

4284089eae2f515bfdf2dc2d20450241dadfde4a
SHA256

e89cbbd0dd9bed80ad5fb56cfdf867529351416d378e1220b65bd1d58466c55a
SHA512

d30dc3619d62d4ee75c0066f9c5ed614b985b95ff128c5a402edab0beeb1c78d12ce087d01d33f272d8deb32e227d71071dfc3fb6f19b8dd66c89f1b7a4e9ca2
SSDEEP

192:7ZWDXH/hu5jcP7KY4Vf7sBxPQWhpY8v1/HI1aueBvuBY1YYG3YVYFy/TkX616/Qh:7ZsXfecA9TYvYFyIsdNbS5Px6Jg1/BJ2

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3480	msedge.exe
3480	msedge.exe
2988	msedge.exe
2988	msedge.exe
1604	identity_helper.exe
1604	identity_helper.exe
6032	msedge.exe
6032	msedge.exe
6032	msedge.exe
6032	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe
2988	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2988 wrote to memory of 4444	2988	msedge.exe	88
PID 2988 wrote to memory of 4444	2988	msedge.exe	88
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 5096	2988	msedge.exe	89
PID 2988 wrote to memory of 3480	2988	msedge.exe	90
PID 2988 wrote to memory of 3480	2988	msedge.exe	90
PID 2988 wrote to memory of 916	2988	msedge.exe	91
PID 2988 wrote to memory of 916	2988	msedge.exe	91
PID 2988 wrote to memory of 916	2988	msedge.exe	91
PID 2988 wrote to memory of 916	2988	msedge.exe	91
PID 2988 wrote to memory of 916	2988	msedge.exe	91
PID 2988 wrote to memory of 916	2988	msedge.exe	91
PID 2988 wrote to memory of 916	2988	msedge.exe	91
PID 2988 wrote to memory of 916	2988	msedge.exe	91
PID 2988 wrote to memory of 916	2988	msedge.exe	91
PID 2988 wrote to memory of 916	2988	msedge.exe	91
PID 2988 wrote to memory of 916	2988	msedge.exe	91
PID 2988 wrote to memory of 916	2988	msedge.exe	91
PID 2988 wrote to memory of 916	2988	msedge.exe	91
PID 2988 wrote to memory of 916	2988	msedge.exe	91
PID 2988 wrote to memory of 916	2988	msedge.exe	91
PID 2988 wrote to memory of 916	2988	msedge.exe	91
PID 2988 wrote to memory of 916	2988	msedge.exe	91
PID 2988 wrote to memory of 916	2988	msedge.exe	91
PID 2988 wrote to memory of 916	2988	msedge.exe	91
PID 2988 wrote to memory of 916	2988	msedge.exe	91

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\bdbdc62ebfa1b11178d735f49926bf7e.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa728e46f8,0x7ffa728e4708,0x7ffa728e4718
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,14590801689439410614,7308518556968392354,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,14590801689439410614,7308518556968392354,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,14590801689439410614,7308518556968392354,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2828 /prefetch:8
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,14590801689439410614,7308518556968392354,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,14590801689439410614,7308518556968392354,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,14590801689439410614,7308518556968392354,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,14590801689439410614,7308518556968392354,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3772 /prefetch:1
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,14590801689439410614,7308518556968392354,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:1
  2⤵
  PID:852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,14590801689439410614,7308518556968392354,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3744 /prefetch:1
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,14590801689439410614,7308518556968392354,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,14590801689439410614,7308518556968392354,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,14590801689439410614,7308518556968392354,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5864 /prefetch:1
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,14590801689439410614,7308518556968392354,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5976 /prefetch:1
  2⤵
  PID:544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,14590801689439410614,7308518556968392354,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:5296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,14590801689439410614,7308518556968392354,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5384 /prefetch:1
  2⤵
  PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,14590801689439410614,7308518556968392354,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2816 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6032

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4468

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2916

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
7c6136bc98a5aedca2ea3004e9fbe67d

SHA1
74318d997f4c9c351eef86d040bc9b085ce1ad4f

SHA256
50c3bd40caf7e9a82496a710f58804aa3536b44d57e2ee5e2af028cbebc6c2f2

SHA512
2d2fb839321c56e4cb80562e9a1daa4baf48924d635729dc5504a26462796919906f0097dd1fc7fd053394c0eea13c25219dec54ffe6e9abb6e8cb9afa66bada

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
5c6aef82e50d05ffc0cf52a6c6d69c91

SHA1
c203efe5b45b0630fee7bd364fe7d63b769e2351

SHA256
d9068cf3d04d62a9fb1cdd4c3cf7c263920159171d1b84cb49eff7cf4ed5bc32

SHA512
77ad48936e8c3ee107a121e0b2d1216723407f76872e85c36413237ca1c47b8c40038b8a6349b072bbcc6a29e27ddda77cf686fa97569f4d86531e6b2ac485ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
194KB

MD5
f5b4137b040ec6bd884feee514f7c176

SHA1
7897677377a9ced759be35a66fdee34b391ab0ff

SHA256
845aa24ba38524f33f097b0d9bae7d9112b01fa35c443be5ec1f7b0da23513e6

SHA512
813b764a5650e4e3d1574172dd5d6a26f72c0ba5c8af7b0d676c62bc1b245e4563952bf33663bffc02089127b76a67f9977b0a8f18eaef22d9b4aa3abaaa7c40

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
cf434549a50f54f50dcbf33bde2929e5

SHA1
8e358ab457ff9594d251819f8eac1b00a436ac25

SHA256
76d9c81a1e7c55b079bc8c56160cc4667c45236e2121e6423447bdda6e751b51

SHA512
b77a571611cf6c1e5adace184d7a0d82deebd8f4060568822c6726fc3beb62cf75db92ba75ad1568ff9df1f82b63dcb6f4969c980b2a42b3eb99cbc868a0dabb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
2222f0d91ad30822c9468c0682f0e7aa

SHA1
b4b42029603b123f13aa482d921ad37b1a6f3656

SHA256
487562ca0e7e89b677d060dda5f35a817e06ed597247f20e7caac86e64bd0138

SHA512
d499938f29fddb927899bc099b184dc91163042b397ec3c6ef10bd7421a6bf00706ce33cc54a9b24aad8333d5b349b7d6a9f8b9e89cbfa653193d294196ca013

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8f57b51b877bfc1ef4234e12a0802af0

SHA1
d305a00f2cb0771978ff10086dab96c75178af6f

SHA256
679c2d9fe305c28b08956f42e15f45bd0beeb35f674ccdba21b1722b5fd94c7c

SHA512
134c31076af5a9381a82763742985d5c42d3b0598835b316140df376cae6dfe2199c76ef20b2c2cc5b58185877b32579a28f4bc92fe64f45df6d5598fe821907

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8240ad46e6fdcbd0b9609957c60220ed

SHA1
3d0e677f73e57907f09b39090c74fb6a46c13a2b

SHA256
863bcf8d9290339286a92b326c0b98526b8192373cb52af13d465e79811ecdf3

SHA512
9cb1fdbd23cc11247b2359aa766edc9f87049652ebb93c1187bf09346076f5438031d152e0e25792e5d8fe91ff643beebfdab9e7c245d75a4f3705c84ec0c54a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
c255e035bb41992d14859b7fcc7312b2

SHA1
295c727a1dbe4211c27f408959079931c4d47a40

SHA256
bcb8e168681a7af3cd0274b948d4080a0017f69447ffa52877a417d93a58e12b

SHA512
fc953a62553e528c8ace44be5129f41ad4cbf5d065af4d094756de4e351d4620720c5d059bd39e120870111013ec039a3ee524628c12ad90784c810209bd17b9

Download Submit